MAL-2025-6465 Malicious code in bluesadway (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bioformats (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bavard-ml-common (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aphisherman (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6435 Malicious code in aphisherman (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aphisher (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aistac-foundation (PyPI)

--- -= Per source details. Do not edit below this line.=-...

After a successful phishing attack, new versions of `num2words` were published containing malware.

The num2words project was compromised via a phishing attackand two new versions were uploaded to PyPI containing malicious code.The affected versions have been removed from PyPI,and users are advised to remove the affected versions from their environments...

MAL-2025-191828 Malicious code in prof-tg-to-qu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e590e0ed82342410566d6866a770346dcbe14dc6f93bc6294d245148d6c28a51 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...

Campcodes Online Hotel Reservation System Injection Vulnerability

CampCodes Online Hotel Reservation System is an online hotel reservation system from CampCodes Philippines. Campcodes Online Hotel Reservation System version 1.0 suffers from an injection vulnerability that originates from a SQL injection due to misuse of the username/password parameters in the...

MAL-2025-41789 Malicious code in trongridperm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eb2deee7747ccb12e0b2da45c212a0678fc8a3f02bf72b8aba4508ae70e3e26a Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-41701 Malicious code in maxload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09b392bd35def14bcd622e3863dec62ba92d26ef152cc81e657cb2c2194b93a8 Running the module downloads, configure its startup and starts a remote executable. The exe is capable of sending files to a hardcoded Telegram channel, but th...

Malicious code in maxload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09b392bd35def14bcd622e3863dec62ba92d26ef152cc81e657cb2c2194b93a8 Running the module downloads, configure its startup and starts a remote executable. The exe is capable of sending files to a hardcoded Telegram channel, but th...

ai-dynamo (>=0.1.0, <=0.3.0), llama-index-llms-openllm (>=0.2.0, <=0.4.0) +1 more potentially affected by CVE-2025-54381 via bentoml (>=1.4.1, <=1.4.8)

bentoml PYPI version =1.4.1, =0.1.0, =0.2.0, =0.6.20, =0.6.30 Source cves: CVE-2025-54381 Source advisory: SNYK:PYTHON-BENTOML-11327149...

ai-dynamo (>=0.1.0, <=0.3.0), llama-index-llms-openllm (>=0.2.0, <=0.4.0) +1 more potentially affected by CVE-2025-54381 via bentoml (>=1.4.1, <=1.4.8)

bentoml PYPI version =1.4.1, =0.1.0, =0.2.0, =0.6.20, =0.6.30 Source cves: CVE-2025-54381 Source advisory: GHSA-MRMQ-3Q62-6CC8...

ai-dynamo (>=0.1.0, <=0.3.0), llama-index-llms-openllm (>=0.2.0, <=0.4.0) +1 more potentially affected by CVE-2025-54381 via bentoml (>=1.4.1, <=1.4.8)

bentoml PYPI version =1.4.1, =0.1.0, =0.2.0, =0.6.20, =0.6.30 Source cves: CVE-2025-54381 Source advisory: OSV:GHSA-MRMQ-3Q62-6CC8...

Malicious code in someeebbb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0fd59432f228380b77cbfb70e5a776f13b909d7be4b57ce72e270f41ac035ee0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-41764 Malicious code in someeebbb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0fd59432f228380b77cbfb70e5a776f13b909d7be4b57ce72e270f41ac035ee0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

RLSA-2025:8246 Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: wifi: rtw89: Fix array index mistake in rtw89stainfogetiter CVE-2024-43842 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other relat...

MAL-2025-41786 Malicious code in triple-equal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 10911ac4eed73695e2fe15b22983d481742de5688de5b3329d330daa2f88bba9 When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...